Ransomware attacks in the «DDL Cybersicurezza»: from the offence of cyber-extortion to the coordination of investigations and incident response

Abstract

The paper analyses the offence of 'cyber extortion' that the «DDL Cybersicurezza» proposes to introduce into the Criminal Code, and assesses its consistency with the criminological understanding of ransomware attacks and the relevant conceptual categories in criminal law. The final part of the paper also focuses on the coordination between criminal investigations and incident response outlined by the DDL.